To share risk and fraud information in the mandatory credit card company’s database regarding the conduct of a merchant’s account thereby reducing exposure to fraud and breaches of scheme rules and standards.

All account details of merchant account, and circumstances and conduct of the account.

Global Payments UK LLP (UK)

To allow payment processing, fraud checking and dispute handling for transactions of PayPal users when those users transact with a merchant who uses the PayPal service via the Global Payments service.

Name, address, date of birth, national identity number and purpose of transaction.

2. Audit

PricewaterhouseCoopers Sàrl (Luxembourg)

To test PayPal’s Anti Money Laundering (AML) and Know Your Customer (KYC) controls and to carry out professional auditing services for PayPal Inc. and its subsidiaries.

For a sample of individual customer accounts: name, PayPal account number (Customer ID), total amount received on the PayPal account, total amount sent from the PayPal account, type of PayPal account, and, as the case may be, any other relevant account information.

To verify identity, verify linkage between a customer and its bank account or credit/debit card, assist in making decisions concerning a customer’s credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.

Please note that data disclosed to these agencies may be retained by the applicable credit reference and fraud agency for audit and fraud prevention purposes.

To verify identity, verify linkage between a customer and its bank account or credit/debit card, make decisions concerning a customer’s credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.

to report defaults and supply monthly account performance information, where the account shows an amount owing to us (reflected as a negative balance) for three or more consecutive months, to the databases of these third parties; and

for the purposes set out in section 8 of this Privacy Policy.

Please note that data disclosed to these agencies and databases may be:

retained by the applicable credit reference agency or database for audit and fraud prevention purposes;

disclosed to other financial institutions for the purpose of gauging creditworthiness; and

For users with UK PayPal accounts only: to prevent and detect fraud (which may include checking details on job applicants and employees and on proposals and claims for all types of insurance).

Please note that data disclosed to this database may be:

retained by the database for audit and fraud prevention purposes;

disclosed to other financial institutions for the purpose of fraud prevention and detection (including to prevent money laundering) for example, when checking details on applications for credit and other facilities, managing credit and credit related accounts or facilities, recovering debt, checking details on claims for insurance and checking details of job applicants or employees;

used to determine your risk profile and for cooperation with the relevant authorities in compliance with the requirements of the Luxembourg Law of 5 April 1993 on the financial sector and laws relating to the prevention of money laundering, terrorism and fraud (excluding the treatment of personal data in relation to solvency of the persons referred to in article 14(1)(d) of the Luxembourg Law of 5 April 1993 on the financial sector); and

transferred outside of the EU and on a global basis.

All account details and circumstances of the conduct of the account.

DueDil Limited (UK)

To receive business information for risk assessment, and compliance with anti-money laundering requirements, such as establishing the corporate structure and beneficial ownership.

Company registration number, name and address of business, name, address, date of birth of directors.

Deltavista GmbH (Germany)

Establish risk associated with address, identity; assist in making decisions concerning a customer’s credit worthiness; carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products and services.

To verify identity, address and phone number and retrieve contact phone numbers and addresses, establish risk associated with address, identity; research and testing as to appropriateness of new products and services.

To assist in making decisions concerning the credit worthiness of consumers (if they have a German PayPal account and have specifically consented to such check) and merchants, including without limitation, in relation to credit products offered by PayPal and offering direct debit payments as payment method.

The creditworthiness scores that we request from these agencies that include scores that are calculated according to mathematical-statistical procedures.

Please note the fact that PayPal requested such information, and any negative account performance data disclosed to these databases in relation to customers who have a German PayPal account may potentially be:

retained by the database for audit purposes and for scoring of such customer’s creditworthiness;

any such score may be disclosed to other third parties for the purpose of gauging creditworthiness.

and

transferred outside of the EU and on a global basis.

Name, address, date of birth, phone number, email address, account status, account balance, and in case the transfer of such information is legally justified, also certain information on negative account performance of a customer with a German PayPal account, for which PayPal has requested a creditworthiness check from the respective database, web address, umsatzsteuerid/VAT ID and data vendor reference number (if relevant).

SCHUFA Holding AG (Germany), Infoscore Consumer Data GmbH (Germany)

To verify a customer's identity and address, carry out checks for the prevention and detection of failing direct debit payments, and of crime including fraud and/or money laundering, including checks on the linkage of the customer and its bank account, to help determine creditworthiness of consumers (if they have a German PayPal account and have specifically consented to such check) and of merchants, and for research and testing as to appropriateness of products and services.

The creditworthiness scores that we request from these agencies include scores that are calculated according to mathematical-statistical procedures.

Please note the fact that PayPal requested such information, and any negative account performance data disclosed to these databases in relation to customers who have a German PayPal account may potentially be:

retained by the database for audit purposes and for scoring of such customer’s creditworthiness;

any such score may be disclosed to other third parties for the purpose of gauging creditworthiness

and

transferred outside of the EU and on a global basis.

Further, in relation to customers who have a German PayPal account, the information on a failed direct debit payment may be:

retained by the Infoscore database for audit purposes; and

(without linkage to the customer’s identity) disclosed to other third parties for the purpose of preventing failed direct debit payments.

Name, address, email address, date of birth, gender, bank account details, information on failed direct debit payments from a bank account (without linkage to the identity of the customer), and in case the transfer of such information is legally justified, also certain information on negative account performance of a customer with a German PayPal account.

To determine creditworthiness of merchants. To carry out checks for the prevention and detection of crime including fraud and/or money laundering and for the evaluation of verification process improvements. For the research and testing as to appropriateness of new products and services.

To verify identity, carry out checks for the prevention and detection of crime including fraud, research and testing as to appropriateness of new products and services.

Name, address, date of birth, telephone number, email address.

RSA Security Inc. (USA) and RSA Security Ireland Limited (Ireland)

To verify identity.

All account information.

ID Checker.nl BV (Netherlands) (Ireland)

To verify identity; automatic data extraction from images of documents, and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition

To validate and re-structure address data into normalized format and to verify name and address.

Name, address, email address.

Mitek Systems Inc. (USA)

To validate images of identity documents and research and testing as to appropriateness of new products and services; research and testing as to appropriateness of new products; training of document recognition.

To verify identity; automatic data extraction from images of documents,and document validation / forgery detection. Research and testing as to appropriateness of new products and services; training of document recognition

Validate and apply data quality checks to phone numbers (SMS message to be sent to the customer).

Name, address, phone number.

Signicat AS (Norway)

To verify and authenticate identity.

Name, address, date of birth and e-id reference number.

BankersAccuity Inc. (USA)

Research and testing as to appropriateness of new products and services in relation to the validation of the account data provided to us by the user and conversion of national account data information into IBAN.

Customer’s bank account number and sort code and / or IBAN.

ArkOwl LLC (USA)

To verify email address.

Email address.

Fraudscreen Ltd (UK)

To evaluate level of fraud risk. Research and testing as to appropriateness of new products and services.

Name and address, Customer ID, Date of Birth, Address, Postcode, E-mail address, Phone numbers, all account details and circumstances of the conduct of the account, relevant transaction information, decisioning information and all information supplied and used for your application for UK products.

Trustev Ltd (Ireland)

To establish identity through customer’s social media data, connections and credentials.

Name, address, date of birth, email address and account number.

Tracesmart Ltd (UK)

To identify customers and assist with fraud detection, prevention, and or remediation of fraud, or other illegal actions or to detect, prevent or remediate violations of policies or the applicable user agreements. . For the evaluation of verification process improvements and for the research and testing as to appropriateness of new products and services.

To process technical applications and to provide a data and document gateway for account review, testing and vetting purposes, and to exchange user information and images of documents proving identity, address and ownership of funding instrument with contracted fraud and credit reference agencies. To also aggregate data from internal and external data sources and provide statistical analysis in order to assess the risk of fraud.

All account information and documents supplied by customers, to include information used to provide identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance / Credit purposes. This information may also include IP addresses.

First Data Corporation (USA)

To process merchant-initiated and customer-authorized transactions and to provide account/card processing services, to store transaction, payment and other customer data related to those transactions.

All account information and documents supplied by customers, to include information used to provide identity and address.

To verify identity, verify linkage between a customer and its bank account or credit/debit card, to make decisions concerning a customer’s credit worthiness (including without limitation, in relation to credit products offered by PayPal). To carry out risk assessment on the customer (individual or legal entity). To carry out checks for the prevention and detection of crime including fraud and/or money laundering and in compliance with anti-money laundering requirements such as establishing the corporate structure and beneficial ownership. To assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking. For the evaluation of verification process improvements.

Name, address, phone number, email address, date of birth, tax ID, passport ID, or other government issued identification number. Length of time at address, proof of identity, legal form, length of time in business, company name including“doing business as” or “trading as” names, company address, company tax or other government ID such as company registration number, company owners, controlling managers and beneficial owners. Name, address, date of birth of directors. Funding instrument including bank account and credit /debit card details (if appropriate)and relevant transaction information (if appropriate). All information supplied when applying for a product or account functionality (including information obtained from social media accounts or online reputation data).

National Credit Bureau (Russia)

To receive business information for risk assessment, and compliance with anti-money laundering requirements, such as establishing the corporate structure and beneficial ownership. To assist in making decisions concerning a customer’s credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.

Company registration number, name, and address of business, name, address, date of birth of directors, any 'trading as' names, list of companies that directors are involved in, date company established/registered.

To receive information for risk assessment and assist in making decisions concerning a customer’s credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.

To receive information for risk assessment and assist in making decisions concerning a customer’s credit worthiness (including without limitation, in relation to credit products offered by PayPal), carry out checks for the prevention and detection of crime including fraud and/or money laundering, assist in debt recovery, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking.

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products and services; training of document recognition

Photo of customer and document images supplied by customer including all information they contain.

Paycasso Verify Limited (UK)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products and services; training of document recognition.

Photo of customer and document images supplied by customer including all information they contain. Information from document’s embedded RF chip (when applicable).

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; to assist with customer authentication. Research and testing as to appropriateness of new products and services; training of document recognition and for the evaluation of verification process improvements.

Name, address and date of birth and phone number. Photo of customer and document images supplied by customer including all information they contain.

QGen Limited (Malta)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering.

Photo of customer and document images supplied by customer including all information they contain.

SmartKYC Ltd (UK)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering.

Name, address and date of birth.

Dun & Bradstreet Limited (UK), Dun & Bradstreet, Inc. (USA)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Global Data Consortium, Inc. (USA)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address,date of birth and phone number.

CRIF GmbH (Austria)

CRIF Ltd (Switzerland),

CRIF AG (Switzerland)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering. research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

UPC BVK (Belgium)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; to screen for watch lists and adverse media; research and testing as to appropriateness of new products

Corporate name or individual name, address, telephone number

Soliditet AB (Sweden)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Publicis Groupe (France)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering.

Name, address and date of birth.

Blue Shape SRL (Italy)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

PostNL (Netherlands)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Compta S.A. (Portugal)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Deyde Calidad de Datos S.L. (Spain)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Kyckr, (Australia)

Global Business Register Limited, T/A Kyckr (Ireland)

To verify identity and provide ongoing due diligence of customer data. Research and testing as to appropriateness of new products and services.

Provision of business register data and information for the onboarding of new customers.

Provision of third party data for the screening and validation of new and existing customers.

To carry out risk assessment on the customer. To carry out checks for the prevention and detection of crime including fraud and/or money laundering and in compliance with anti-money laundering requirements such as establishing the corporate structure and beneficial ownership.

To undertake research and testing as to appropriateness of new products and services. For system checking and for the evaluation of verification process improvements.

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Royal Mail Group Ltd (UK)

To validate and re-structure address data into normalized format and to verify name and address. Research and testing as to appropriateness of new products and services.

Name, address, email address, phone numbers

Credit Kudos Limited (UK)

To evaluate level of fraud risk and credit risk, verification of income and expenditure. Research and testing as to appropriateness of new products and services.

Name and address, Customer ID, Date of Birth, Address, Postcode, E-mail address, Phone numbers, all account details and circumstances of the conduct of the account, relevant transaction information, decisioning information and all information supplied and used for your application for UK products.

Acton International Ltd (USA)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Bisnode Norge AS (Norway)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Bisnode Belgium NV/SA (Belgium)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Bisnode Danmark A/S (Denmark)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Bisnode Sverige AB (Sweden)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, address, date of birth and phone number.

Bisnode Deutschland GmbH (Germany)

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

To verify identity and carry out checks for the prevention and detection of crime including fraud and/or money laundering; research and testing as to appropriateness of new products

Name, Address, Phone Number, Email Address, IP Address

Tradle Inc (USA)

To receive customer information for risk assessment, and compliance with anti-money laundering requirements, such as establishing the corporate structure and beneficial ownership. To verify identity; automatic data extraction from images of documents,and document validation / forgery detection. Research and testing as to appropriateness of new products and services.

Only for merchants using PayPal through the partner’s payment solution: merchant ID, number of PayPal transactions, transaction volume with PayPal and, as the case may be, termination of the PayPal account.

Name, email address, delivery and billing address, phone number, date of sign-up, the number of payments received from verified PayPal users, whether the customer has been verified to have a bank account, details of transactions and details of unsuccessful payments

Name, address, email address, date of birth (where required), all account information and documents supplied by customers, to include information required to prove identity and address.

United Kapital Limited (UK) and United Kapital Limited, LLC (USA)

To enable you (or the merchant with which you transact) to use products issued by United Kapital with PayPal.

Only for PayPal merchants applying for and using products issued by United Kapital Limited: Name, business name, address, date of birth, copies of identification documents, PayPal identification (merchant ID), email address, phone number, transaction information (including, without limitation, number of PayPal transactions and transaction volume with PayPal), length of time as a PayPal user and, as the case may be, termination of the PayPal account.

To provide automated label printing for sellers using PayPal and eBay to facilitate postal and delivery services, payment reconciliation services and to assess risk, or to help detect, prevent and/or remediate fraud, or other potentially illegal acts and violations of policies

To verify identity and carry out checks for the management of risk, prevention and detection of crime including fraud.

First Name, Last Name, Email, Whether email is verified, Phone number, Address, Account Status Account Type, When account was opened, Whether customer purchased anything using PayPal within the last 30 days (Yes or No), Whether billing information changed within the last thirty days (Yes or No),

7. Marketing and Public Relations

Northstar Research Partners (USA)

To conduct customer service surveys.

Name, email address, type of account, type and nature of the PayPal services offered or used, and relevant transaction information.

Name, email address, phone number, country of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.

Lieberman Research Worldwide LLC (USA)

To conduct customer service and marketing surveys.

Name, email address, phone number, country of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.

To store merchant contact information as well as other supporting information about the business relationship.

Name, address, phone number and email address, business name, URL PayPal Account ID and other supporting information about the business relationship, such as (without limitation) name of contact person and contact information at merchant and/or partner through which merchant has been onboarded, description of products sold through PayPal, communication notes and onboarding information, internal decisions about the merchant, revenue calculations and other information on the merchant’s business as made available by the merchant, and information relevant for special integrations of merchants, name and address of bank.

Name, business name, address and registration number of merchant/partner, name, job, title, email address, phone number of merchant’s contact person, merchant website URL, PayPAl account number, third party applications used by the merchant, behaviour on PayPal Serviceswebsite.

To store merchants' contact information for marketing communications to those merchants.

Name of the merchant, name of the contact person, address, email address, phone number, merchant website URL.

Consultix (France and Spain) and Quadro Srl (Italy)

To host information provided by merchants and display part of this information on the pages of the PayPal website listing websites accepting PayPal and proposing special offers to PayPal users.

All information provided by merchants in connection with their use of these pages of the PayPal website (including in particular name of the merchant, name of the contact, email address, logo and information relating to the promotion(s) offered to PayPal users).

Help identify behaviour on PayPal websites and the mobile app in order to guide decision about targeted marketing; to help efficiently handling and optimising desktop and mobile campaigns and elsewhere in the web and execute retargeting campaigns in order to deliver personalised advertising.

To execute and measure retargeting campaigns in order to segment users for marketing campaigns involving PayPal mobile applications.

Device ID used for Apple’s iOS operating system when a user installs an application, signs up for the PayPal Services, logs in, checks in, or sets a profile picture.

Nanigans, Inc. (USA)

To execute retargeting campaigns in order to deliver personalised advertising.

Advertising ID associated with Apple iOS devices when a user installs an application, relaunches an application, signs up for the PayPal Services, logs in, checks in, checks their balance, saves an offer, successfully completes a transaction, sets a profile picture, or makes other account changes in or related to the use of the application.

Heaven SAS (France)

To execute marketing campaigns for merchants.

Name of merchant, merchant website URL, description of item purchased and price of item.

Wire Stone LLC (USA)

To select, notify winners and prize fulfillment for winners of survey sweepstakes.

Name, email address, encrypted ID and country.

Sotiaf Telematiques Associes SAS (France)

To store user data for marketing campaigns and to execute direct marketing campaigns.

Name, email address, and phone number.

2engage (Germany) and Quo Vadis (Germany)

To conduct market surveys.

Name, company name, address, telephone number, domain name, e-mail address, type and nature of use of PayPal services, market segment and generalised categorisation of company size and information on participation in earlier surveys.

Name, email address, phone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.

Oracle America Inc. (USA),

Oracle Corporation UK Ltd

To develop, measure and execute marketing campaigns.

Name, business name, address and registration number of merchant, name, job title, email address, phone number of merchant’s contact person, merchant website URL, PayPal account number, third party applications used by the merchant, behaviour on PayPal website.

Help identify behaviour in the mobile app in order to guide decision about targeted marketing; to help efficiently handling and optimising mobile campaigns on social networks and elsewhere in the web.

Anonymous cookie ID, Advertising ID, and Device ID used by a specific person, events in the mobile app about the use of the mobile app by a specific user (including, without limitation, login, successful completion of the transaction), but no payment and financial information details.

Content of advertisements to be delivered to specific users and, as appropriate, segmentation group to which such person belongs to for advertisement purposes.

Name, business name, address and registration number of merchant/partner, name, job title, email address, phone number of merchant’s contact person, merchant website URL, PayPal account number, third party applications used by the merchant, behaviour on PayPal website.

OC&C Strategy Consultants Limited (UK)

To conduct market research and develop insight.

Anonymized account and transaction information.

PaketPLUS Marketing GmbH (Germany)

Managing marketing campaigns, distributing flyers to merchants and follow up of the campaigns.

Consumer name, Location, Nature and scale of fraud on the account, Business name.

Contact information inluding, but not limited to, name, email, telephone number. Anonymous cookie ID, Advertising ID. Content of communications to be delivered to specific users and, as appropriate, segmentation group to which such person belongs to for communication purposes.

Adjust GmbH (Germany)

Help identify behaviour in the mobile app in order to guide decision about targeted marketing; to help efficiently handling and optimising mobile campaigns on social networks and elsewhere in the web.

Anonymous cookie ID, Advertising ID, and Device ID used by a specific person, events in the mobile app about the use of the mobile app by a specific user (including, without limitation, login, successful completion of the transaction), but no payment and financial information details.

Content of advertisements to be delivered to specific users and, as appropriate, segmentation group to which such person belongs to for advertisement purposes.

To execute retargeting campaigns in order to deliver personalised advertising.

Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.

Pandora

To execute retargeting campaigns in order to deliver personalised advertising.

Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.

Affilio

To execute retargeting campaigns in order to deliver personalised advertising.

Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.

Resultados Digitais

To execute retargeting campaigns in order to deliver personalised advertising.

Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages and emails delivered to users.

Netfluential Ltd. (UK)

To conduct customer service and marketing surveys.

Name, email address, phone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.

Greenberg Inc. (USA)

To conduct customer service and marketing surveys.

Name, email address, phone number, type of account, type and nature of the PayPal services offered or used and relevant transaction information.

LatentView Analytics Corporation (US, UK, India)

To conduct customer service and marketing surveys.

Name, email address, phone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.

Hall & Partners Europe Ltd. (UK)

To conduct customer service and marketing surveys.

Name, email address, phone number, type of account, type and nature of the PayPal services offered or used and relevant transaction information.

Firefish Ltd. (UK)

To conduct customer service and marketing surveys.

Name, email address, phone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.

FocusVision Worldwide Inc. (USA), Focus Vision Inc (UK)

To conduct customer service and marketing surveys.

Name, email address, phone number, country/city of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys.

Clear Score Technology Ltd. (UK)

To execute targeted campaigns in order to deliver personalised advertising.

Anonymous ID generated by cookies, pixel tags or similar technologies embedded in webpages, ads and emails delivered to users.

VivaKi GmbH (Germany)

To collect anonymous user information to efficiently optimize marketing campaigns. Help identify behaviour on PayPal websites in order to guide decision about targeted marketing and personalized advertising.

Help identify behaviour in the mobile app in order to guide decision about targeted marketing; to help efficiently handling and optimising mobile campaigns on social networks and elsewhere in the web.

Anonymous cookie ID, Advertising ID, encrypted customer ID, and Device ID used by a specific person, events in the mobile app about the use of the mobile app by a specific user (including, without limitation, login, successful completion of the transaction), but no payment and financial information details.

Content of advertisements to be delivered to specific users and, as appropriate, segmentation group to which such person belongs to for advertisement purposes.

Quiller Consultants (UK)

Support UK Government Relations work.

PayPal marketing materials and product overviews. Occasional merchant case study. All other data shared will be public record e.g. consultation response. No customer or merchant specific data will be shared.

iProspect

Search Engine Optimization to support PayPal marketing temas and provide feedback on web-design and site issues.

Cookie ID, Customer ID, Country, account type, IP address.

Mozoo UK LTD, LoopMe Ltd., 4th Screen Advertising Ltd

To execute and measure retargeting campaigns, to segment users for marketing campaigns, to deliver personalized advertising.

Name, email address, phone number, country of residence/business, encrypted ID, transaction frequency, recency and volume, type of account, exposure to marketing materials, exposure to product flows, type and nature of the PayPal products/services offered or used, customer service contact, merchant/consumer classification, number of merchant transactions, number of months active, other relevant account/transaction information, and all information obtained from surveys

Borek media GmbH (Germany)

To assist in the execution of offline direct mail and marketing campaigns.

To investigate (including, without limitation, to carry out asset and/or site inspections and/or business evaluations) and/or collect (and/or assist with the collection of) debt from potentially and actually insolvent customers.

Name, address, phone number, account number, date of birth, email address, account type, account status, last four digits of financial instruments account, sort code, account balance, details of account transactions and liabilities, name of funding source provider and copies of all correspondence, in each case relating to amounts you owe (or another person owes) to us.

Webbank (USA)

Only for customers who are also customers of Bill Me Later, Inc.: to help with accounting and recovery services.

For the purpose of verification of identity also: other information contained in documents requested by PayPal for Risk / Compliance purposes.

For customers with a German PayPal account also: phone number, length of time at address, length of time in business, length of time with PayPal, funding instrument including bank account and credit /debit card details and relevant transaction information, credit score received on behalf of PayPal from a credit reference agency, account number, account type, account status, account balance, details of account transactions and liabilities, negative account performance data.

P K Consultancy Limited (UK)

To assess risk and help detect and prevent potentially illegal acts and violations of policies.

To verify identity and ensure that a user is a PayPal account holder. To process instant funding requests made by a user through the Blue Media services.

Name and email address.

Consultix GmbH (Germany)

To assist in the creation of PayPal Business Accounts for merchants on-boarding through their bank's or other contract partner payment or service gateway.

All information provided by the merchant (directly or via his/her bank or other contract partner) for the purpose of creating his/her PayPal business account (including without limitation email address, address, business name, business contact details and bank account details).

Akamai Technologies Inc. (USA)

Content delivery network – to deliver PayPal page content from local servers to users. To also retrieve risk information regarding the IP and device from which customers are accessing PayPal, research and testing as to appropriateness of new products and services.

IP and hardware information about the device (device ID, User IP address cookies). Circumstances of the conduct of IP.

To process technical applications and to provide a data and document gateway for account review, testing and vetting purposes, and to exchange user information and images of documents proving identity, address and ownership of funding instrument with contracted fraud and credit reference agencies.

All account information and documents supplied by customers such as proofs of identity and address, ownership of a funding instrument, or other documents requested by PayPal and the data contained therein for Risk / Compliance Credit purposes.

RR Donnelley and Sons Company (USA)

To provide printing services such as statements and other printed materials.

Name, address, email address, and account information.

Scorex (UK) Limited (UK)

To provide a technology solution to allow PayPal to process, send and receive credit information of users via its contracted credit reference agencies.

Name, address, email address, date of birth, length of time at address, phone number, legal form, length of time in business, company registration number, VAT number (if appropriate).

OXID eSales AG (Germany)

Services in connection with the development and operation of a payment system for stationary trade (point of sale).

All account information and transaction information (as appropriate).

Ordermotion, Inc. (USA)

To collect data and create/deliver (direct to customer) orders for the PayPal Here product (including, without limitation, the PayPal Here-enabled device).

To allow customers to instantly transfer money from their bank account to their PayPal account.

Name, e-mail and IP-address.

Mediamedics BV

To allow customers to instantly transfer money from their bank account to their PayPal account.

Name, e-mail and IP-address.

Giropay GMBH

To allow customers to instantly transfer money from their bank account to their PayPal account.

Name, e-mail and IP-address.

Trustly Group AB (Sweden)

To verify identity and ensure that a user is a PayPal account holder. To process instant funding requests made by a user via the instant top up service provided by the partner.

Name, KYC/KYB status, account activity information.

Applause App Quality, Inc. (USA)

To provide ability to download PayPal apps for beta testing

Email address and country where located

Google, Inc. (USA)

Amazon Web Services (USA)

To provide cloud-based hosting, storage and processing services to assist and/or enable PayPal to manage users’ Account Information as well as data generated through their use of Paypal Services and deliver, analyse and improve PayPal Services.

All Account Information, data generated through the use, and/or necessary for the provision of, Paypal Services and, more generally, all information referred to in the Privacy Policy (in each case referred to in this (section 8) in redacted or encrypted form).

Accenture (Ireland)

Optimise Call Routing Technology and Processes.

Customer country, teams that have accessed the customer, unique customer identifier of end customer of PayPal.

Deloitte Tax LLP (US, UK, LUX)

Deloitte Tax LLP is PayPal’s third party compliance partner. Deloitte will review PayPal customer and merchant account information to determine if the account holder should be reported to the LUX authorities for FATCA purposes and facilitate the filing of the report with Lux authorities.

(Same information as disclosed with a merchant)Full NameDate of BirthAge Range

Email address

Street Address

City

StateCountryZip Code

Account Status (verified)

Account Type

Account Creation Date

Time Zone

Locale

Language

Gevekom GmbH (Germany)

Providing assistance with PayPal services to business customers.

Company name, Name and surname

Email address

Shop URL

Shop system

Industry

Phone number

Sign up date for PP PLUS

Eligibility to PUI

PP account ID

US Direct E-Commerce Limited (Ireland)

Provides PayPal merchants the ability to purchase Shipping Labels to ship goods domestically as well as Cross Border. Provides PayPal merchants and their buyers the facility to track the shipments in real time.

To verify identity, verify linkage between a customer and its bank account, make decisions concerning a customer’s credit worthiness, determine customer’s risk profile; carry out checks for the prevention and detection of crime including fraud and/or money laundering, manage PayPal accounts and undertake statistical analysis, undertake research and testing as to appropriateness of new products and services and system checking; to enable account information service and/or payment initiation service

Onlinebanking-Credentials

BuiltWith Pty Ltd (Australia)

Amazon.com Inc - Alexa Web Information Service (USA)

Assess seller website trustworthiness

Assess seller website trustworthiness

Website address (URL

9. Group companies

PayPal Inc. (USA)

Acting on behalf of PayPal for the purposes of storing and processing of Account information.

To provide joint customers content and services (including, but not limited to registration, transactions, failover for carrier billing accounts, and customer support), to assess risk, or to help detect, prevent and/or remediate fraud, or other potentially illegal acts and violations of policies, and to guide decisions about their products, services and communications, to enable eBay customer support to reach out to joint customers that have been identified as needing account support.

Litigation Support to facilitate the preservation, collection, processing, analysis, review and production of electronically stored information to comply with requests from government agencies, third-parties, and adverse parties as required by law.

PayPal customer account and merchant, and bank information, name address, email address, social media user names, (truncated redacted or limited depending upon the case and requestor), internal employee communications, including email communications with merchants, customers, clients, and other third parties, spreadsheets, PowerPoint and other business documents related to PayPal and its affiliates.

To provide the Agencies listed with information within their authority (upon their request) and to respond to queries and/or investigations instigated by users or other stakeholders in the countries where they have jurisdiction.

All Account information.

With respect to the column titled, "Purpose", each third party, with the exception of the regulatory agencies, certain of the payment processors and credit reference and fraud agencies and group companies referred to at the end of this table, is carrying out the purpose to fulfil obligations which PayPal has contracted with the entity to fulfil. The regulatory agencies are carrying out their purpose in accordance with their regulatory objectives and requirements. Where explicitly specified in the table, the payment processors and credit reference and fraud agencies may use the information in their respective databases, and forward information to third parties for the purposes of fraud prevention and the assessment of creditworthiness, in accordance with their respective terms.